CVE-2025-71158

gpio: mpsse: ensure worker is torn down

State: Published
Severity: 7.8 High
Published: Jan 23, 2026
Updated: Aug 5, 2026
Reserved: Jan 13, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

gpio: mpsse: ensure worker is torn down

When an IRQ worker is running, unplugging the device would cause a crash. The sealevel hardware this driver was written for was not hotpluggable, so I never realized it.

This change uses a spinlock to protect a list of workers, which it tears down on disconnect.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	c46a74ff05c0ac76ba11ef21c930c3b447abf31a to before 472d900c8bcac301ae0e40fdca7db799bd989ff5Affected c46a74ff05c0ac76ba11ef21c930c3b447abf31a to before 179ef1127d7a4f09f0e741fa9f30b8a8e7886271Affected
LinuxLinux	6.13Affected before 6.13Not affected 6.18.6 through 6.18.*Not affected 6.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.